Policy setup and structure

The current version of the Webhuis CFEngine policies are an evolution of Dynamic CFEngine.

Criticism of Dynamic CFEngine

Convergence is one of the fundamental principles of CFEngine on which the dynamic setup relies on too heavily, because policies are being used to identify dependent and subsequent policies. Policies are being derived from the concept of the 'role' a system has.

• This may lead to a temporarily inconsistent policy set
• Developers tend to reject this setup, they want to have the policy set available right from the beginning
• The role concept as it was, was far from perfect, because of the redundancy in the different roles.

Enter the Role Profile concept.

Role Profile

---

Return to: CFEngine